Coordinates corporate security, risk, and compliance initiatives; maintains security controls, asset and vulnerability information, GRC records, and executive risk reporting. Performs risk assessments, supports internal and external audits, evaluates control deficiencies, manages vendor assessments, responds to client security questionnaires, and develops policies and procedures. Requires experience with HIPAA, SSAE, SOC 1, SOC 2, and IT controls aligned with NIST, ISO, and COBIT frameworks.